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Ribet's ingenious method is the gateway to much later progress. 

— Barry Mazur 

For every prime p, we have the cylotomic number field K = Q(C), 
obtained by adjoining to Q a primitive p-th root £ of 1 ; it is a Galois 
extension of Q, cyclic of degree p—1. The ideal class group A of K is a finite 
commutative group which measures the failure of the ring of integers of K 
to be factorial or principal. We are interested in the F p -space C = A/A p . 
As A and C are trival for p = 2, we assume that the prime p is odd. 

In the middle of the XIX th century, Kummer made a deep connection 
between the group C and the sequence of Bernoulli numbers (Bfc)fc 6 N 
defined by 

_T_ v T* 

e T - 1 ~ ^ k k\ ' 
fceN 

T T 

so that B = 1, Bi = —1/2. As the function —= 1 H is even 

e 1 — 1 2 

(invariant under T i— > — T), we have B& = for k odd > 1. Here are 
the numerators and the denominators of the first few Bernoulli 
numbers B& = N^/D^ of even index k > : 



k = 


2 


4 


6 


8 


10 


12 


14 


16 


18 


20 


N fc = 


1 


-1 


1 


-1 


5 


-691 


7 


-3617 


43867 


-174611 


D fc = 


6 


30 


42 


30 


66 


2730 


6 


510 


798 


330 



Kummer's criterion says that the F p -space C is ^ if and only if p divides 
(the numerator of) one of the rational numbers B2, B4, . . . , B p _3. This is 
equivalent (see §6) to p dividing the product B2B4 . . . B p _3 ; the sequence 
of such irregular primes is 37 (which divides B32 = 7709321041217/510), 
59|B 44 , 67|B 58 , 101|B 68 , 103|B 24 , . . ., 691|Bi 2 , ... 

The F p -space C carries an action of the group A = Gal(K|Q), for which 
there is a canonical isomorphism x '■ A — ► ; its inverse sends a G F^ 
to the automorphism o~ a : £ 1— > £ a of K. Since every character A — > F^ 
is of the form x % f° r a unique i G Z/(p — 1)Z, we have a direct sum 
decomposition C = ©iez/( P -i)zC(x l ), where 

C(x l ) = {c G C I ct(c) = x l (a)c for every a G A}. 
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In the early 30s, Herbrand refined one of the implications in Kummer's 
criterion. He showed that, if k e [2,p— 3] is an even integer such that 
C(x 1_fc ) 7^ 0, then p divides (the numerator of) B^. This is an easy 
consequence of Stickelberger's theorem [18, p. 101]. 

The main result in Ribet's paper is the converse of Herbrand's theorem. 
In other words, he showed that if p divides for some even integer 
k E [2,p-3], then C(x 1_fc ) ^ 0. 

(We may allow k = p—1 in the statement "p|Bfc C(x 1_fc ) 7^ 0" of the 
Herbrand-Ribet theorem. We shall see in §6 that in fact p always divides 
the denominator of B p _i. We must therefore show that C(x) = 0. This 
follows from Kummer theory and the fact that the only degree-p cyclic 
extension of Q unramified outside p is the one contained in Q(^/C).) 

Let us end this introduction by mentioning how the Main Conjecture 
(for the cyclotomic Z p -extension of Q), as first proved by Mazur- Wiles, 
implies a quantitative generalisation of the Herbrand-Ribet theorem; see 
Ribet's own account [17], also available on his homepage. 

Instead of the group C = A <g> F p , consider the p-part D = A <g> Z p of 
the ideal class group A of K = Q(C)- As for C, we have the decomposition 
D = ©iez/( P -i)zD(u/) as a A-module, where to : A — » Z* is obtained from 
X by composing with the canonical ( "Teichmiiller" ) section F * — > Z * of 
the projection Z* — > F p ; every character A — > Q p is of the form uj % for 
a unique % G Z/(p — 1)Z. The Herbrand-Ribet theorem can be restated as 
"p\B k D(u 1 - k ) ^ 0". 

The Main Conjecture implies that, fee [2,p — 3] being an even integer, 
the group D(u; 1_A: ) has the same order as Z p /L(u h ~ 1 , 0)Z P , where, for any 
power e of u>, 

-l p ~ l 

L(e,0) = — 52e(v a )a, (a a :(^C)- 

Because of the Kummer congruence L(o; A:_1 ,0) = — Bk/k (mod.p) [18, 
p. 61], we have p\Bk <^ p\L(u> , 0), so Herbrand-Ribet is indeed a 
consequence of Mazur- Wiles. (There is as yet no unconditional proof that 
the groups D(o; 1_fc ) are cyclic.) 

Although it is now possible, after the work of Thaine and Kolyvagin, 
to give a more elementary proof [18, Chap. 15] of Herbrand-Ribet, and 
indeed of Mazur- Wiles, the original approach using Galois representations 
attached to modular forms was a major source of inspiration for much 
subsequent work and remains of paramount importance today. 

Our aim here is to provide the reader with an overview of Ribet's 
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modular construction (§1-4) ; the numbering of the statements is the same 
as in [16]. §0 contains some results of a general nature which are needed in 
the proof. §5 mentions an alternative approach which can now be carried 
out. Finally, §6 gives Witt's proof of the von Staudt-Clausen theorem on 
the denominators of B^. 

0. Prerequisites 

In this section we recall, without proof but with references to the 
literature, a certain number of results which Ribet needs in order to carry 
out his construction. The reader may go directly to §1-4 and consult this § 
only if he needs to look up the statement of a result being used in the proof. 

Equivariance of the reciprocity map. — First, a special case of a certain 
functorial property of the Artin reciprocity map. Let M|K|Q be finite 
extensions such that M|Q is Galois with group G, such that K|Q is 
Galois with group A, and such that the Galois group H C G of M|K is 
commutative. Denote by Ck the idele class group of K, and by ip : Ck — > H 
the reciprocity map. The group A acts on Ck as well as on H, by 
conjugation on the latter. We will need the fact that ip is equivariant 
for these actions : 

Theorem 0.1 [3, p. 199]. — For every a E G (with image a E A) and 
every x E Ck, we have ip(ax) = aip(x)a~ x in H. 

Locally algebraic characters. — Let Q be an algebraic closure of Q and 
put Gq = Gal(Q|Q). We refer the reader to [14, p. III-2] for the definition 
of a locally algebraic abelian representation Gq — > GL n (K) where K is 
now a finite extension of Q p . Denote the p-adic cyclotomic character by 
X:G Q ->Z£->K*. 

Proposition 0.2. — Every locally algebraic character ip : Gq — > K x is of 
the form ip = y^u for some n E Z and some character u : Gq — > K x of 
finite order. 

The semisimplification of the reduction of a p-adic representation. - 
The next result says that the reduction of a p-adic representation may 
depend upon the choice of a stable lattice, but the semisimplification does 
not. More precisely, let K be a finite extension of Q p , o the ring of integers 
of K, p the unique maximal ideal of o, and F = o/p the residue field. 
Recall that an o-lattice in a finite-dimensional K-space V is a sub-o-module 
generated by any K-basis of V. 

Let G be a profinite group — a compact totally disconnected group - 
and p : G — > GL(V) a (continuous) representation. Among the o-lattices 
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in V, there is at least one which is G-stable, for if A C V is any o-lattice, 
the subgroup H = p _1 (GL(A)) is open in G, hence the index (G : H) is 
finite, and the o-lattice Xlo-eG/H a (^-) ^ s G-stable. 

The choice of a G-stable o-lattice A C V leads to a (continuous) 
representation pa : G — > GL(A) — > GL(A/pA) on a finite-dimensional 
F-space, called the reduction of p along A. The theorem of Brauer-Nesbitt 
says that 

Proposition 0.3 [4, p. 215]. - - The semisimplification p of p\ depends 
only on p, not on the choice of A. 

The representation associated to a weight-2 level-p eigenform. — Next, 
we need some facts about modular forms. Let / G &2(Ti(p)) be a 
normalised cuspidal eigenform of weight 2 for Fi(p), and write the q- 
expansion (with q = e 2t7TT and r G Sj) of / as / = J2 n >o a nQ n - 

Proposition 0.4 [8, p. 234]. — The subfield Kf = Q(ai, a 2 , . . .) of C is 
of finite degree over Q. Moreover, if e : (Z/pZ) x — > C x is the character 
such that f G &2(p, e), then the field Q(s) generated by the values of e is 
contained in the number field K f . 

Recall the construction of the (2-dimensional) representations p/ )P : 
Gq — > GL(V/ 5 p) attached to a normalised eigenform / G &2(p,s). Here p 
is any prime of Kf and Vf,p is a certain vector space — described below 
- over the completion K/ )P of Kf at the prime p. Shimura attaches to / 
an abelian variety A/ over Q (uniquely determined up to Q-isogeny) with 
the following properties. 

The abelian variety A/ has dimension dim A/ = [Kf : Q], it is a 
quotient of the jacobian Ji(p) = JacXi(p) of the modular curve Xi(p), 
and there is an embedding of Q-algebras Kf — > Endq(A/) £g> Q. 

Let Tp(Af) = lim n€ N* p nA/(Q) be the p-adic Tate module of A/ and 
Vp(Af) = Tp(Af) ®z p Qp 5 which is thus a module over Kf <g) Q p . 

Proposition 0.5 [8, p. 390]. — The (Kf <g> Q p ) -module V P (A/) is free of 
rank 2. 

It follows that V/ )P = V P (A/) <8>K f ®Q p K/,p is a 2-dimensional vector 
space over K/ ;P with a continuous linear action of Gq. Denote this degree-2 
representation by 

Pf,P ■■ Gq - GL(V /;P ). 

The abelian variety A/ has good reduction at every prime / 7^ p of Q. 
Further, the Eichler-Shimura relations give 
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Proposition 0.6 [8, p. 390]. - - The representation pf }P is unramified at 
every prime I ^ p and the trace (resp. determinant) of a Frobenius element 
Frobz at I is ai (resp. le(l)) in (resp. K^ py ). 

The final bit of information about Af that we need is the following 
theorem of Deligne-Rapoport. 

Theorem 0.7 [6, p. 113]. - - Suppose that e is not trivial. The abelian 
variety Af acquires good reduction at the unique prime dividing p in the 
maximal real subfield Q(C) + of the cyclotomic field Q(C) (where ( p = 1, 

Finite flat group schemes. — Let E|Q p be a finite extension, with ring 
of integers Oe- Ribet makes crucial use of the following result of Raynaud. 

Theorem 0.8 [15, p. 268]. — Suppose that the ramification index of L|Q P 
is < p — 1. Let G be a finite flat commutative group scheme over L, killed 
by a power of p. There is at most one finite flat extension of G to Ol- 

1. The main theorem 

Adopt the same notation as in the introduction. In particular, p is an 
odd prime and K = Q(C), with (P = 1, ( ^ 1. 

Theorem 1.1. - - Let k e [2,p — 3] be an even integer. If p\Bk, then 

cc^-^o. 

By the functorial property (0.1) of the Artin symbol, it is sufficient to 
construct a suitable every where-unramified extension E|K. 

Theorem 1.2. — Let k e [2,p — 3] be an even integer, and suppose that 
p\Bk- There exists a Galois extension E|Q containing K such that 

(a) The extension E|K is everywhere unramified. 

(b) The group H = Gal(E|K) is a p- elementary commutative group (^ 1) ; 
equivalently, H is an F p -space of dimension > 0. 

(c) For every a in G = Gal(E|Q) (with image a in A) and every r in H, 

era- 1 = x (cx) 1 - k .T 

Proof that (1.2) (1.1). Let M be the maximal p-elementary abelian 
extension of K which is unramified at every place of K ; by maximality, 
M|Q is Galois. The Artin map V : C K -> Gal(M|K), where C K is the 
idele class group of K, is a homomorphism inducing an isomorphism 
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C -> Gal(M|K). Moreover, for every a G Gal(M|Q) (with image a G A) 
and every x G Ck, we have ip(ax) = aifj(x)a~ 1 (0.1). 

In other words, the isomorphism (of F p -spaces) C — > Gal(M|K) induced 
by tp is A-equi variant, and hence induces, for every % G Z/(p — 1)Z, an 
isomorphism C(x*) -> Gal(M|K)(x i ). If (1.2) holds, the latter group is ^ 
for i = 1 — k, because it has the quotient H. It follows that if p|B/-, then 
C( x 1 - fc ) ^ 0, so (1.1) holds. 

The next theorem shows how such an E can be constructed from a 
certain kind of representation of Gq, where Q is an algebraic closure of 
Q containing K. Choose a decomposition group D p C Gq at the prime p, 
and let x a l so stand for the composite Gq — > A — > F* . 

Theorem 1.3. - - Let k G [2,p — 3] 6e even, and suppose that p\Bk- 
There exists a finite extension F\F P , and a (continuous) representation 
r : Gq — > GL2(F), such that 

(i) r is unramified at every prime I ^ p. 

(ii) r is an extension of x k ~ 1 by the trivial 1- dimensional representation : 

for some map 7 : Gq — > F. 
(Hi) The order of Im(r) is divisible by p. 
(iv) The order of Im(r|D p ) is not divisible by p. 

Proof that (1.3) =^ (1-2). Let r be a representation as in (1.3); we 
have detr = x fc_1 , and there is a tower of fields E'|K'|Q, with E' the 
field fixed by Kerr and K' the field fixed by Kerx fc_1 ; we have K' C K, 
because Ker% C Kerx fc_1 . Put H' = Gal(E'|K'), so that the sequence 
1 ^ H' ->Imr ^ Imx fc_1 — > 1 is exact. Notice that H' is a p-elementary 
commutative group, for 7 gives rise to an injective homomorphism H' — > F, 
and its order is > 1, for the order of Imr is divisible by p, by (1.3) (in). 

Next, remark that E'|K' is everywhere unramified. Indeed, for every 
prime / 7^ p, the extension E'|Q is unramified at / by (1.3)(z), and hence 
so is E'|K' at every prime I of K' prime to p. As for the unique prime p of 
K' dividing p, the inertia subgroup at p has order prime to p by (1.3)(iv), 
so E'|K' is at worst tamely ramified, and hence unramified, because E'|K' 
is a p-extension. 

Taking E = E'K, it is now clear that (1.2) (a) and (1.2) (b) hold for 
E|K|Q, because the analogous statements hold for E'|K'|Q, as we have 
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just seen. It remains to show that (1.2) (c) holds as well. This follows from 
the fact that for every a, r G Gq, we have 



1 7 (a) \ /l 7 (r)Wl Y_(l X^ifW 

o x"- 1 ^)) Vo i Mo x"- 1 ^) - [o 1 



because of the identity 



a b\ (\ x\ fa b\ _ ( 1 ad 1 .x 
d \0 1 [O d ~~ [ 1 



It remains to find such an r. We shall take r to be a suitable reduction 
(§2) of the representation p/ )P (§4) attached to a certain weight-2 level-p 
cuspidal eigenform / (§3). 

2. Reductions of p-adic representations 

Let K|Q p be a finite extension, o its ring of integers, p the maximal 
ideal of o, and F the residue field. Let V be a 2-dimensional K-space with 
a continuous linear action p of a profinite group G, and suppose that p (0.3) 
is reducible. The two characters <p\, <p 2 '■ G — > F x such that p ~ cpi © <p2 
are uniquely determined by p up to order. Also, for every G-stable o- 
lattice A C V, the reduction p^ is reducible, and its semisimplification is 
isomorphic to ip\ © (p2 (0.3). For a given A, pa is isomorphic to one of 

<fi * \ (y>\ 

(fi2 J ' V * ^ 2 

and pa is semisimple if pa(G) has order prime to p. Ribet's lemma says 
that each of these two types can be realised for some A, and, if p is simple 
(but p is not), then there is a p\ which is not semisimple and has any of 
the above types prescribed in advance. 

Proposition 2.1. - - Suppose that the degree-2 representation V of G 
is simple but p is not simple. Then, for any ordering tpi,<fi2 of the two 
characters of which p is the direct sum, there is a G-stable o -lattice Ac V 

such that pa ~ I ^ I , as opposed to ( ^ ) , and such that pa 
V ip 2 J \ * ¥2 J 



is not semisimple — not isomorphic to 



¥>i 
(p 2 



Choosing a G-stable o-lattice A C V and fixing an o-basis of A allows 
one to view p as a representation G — > GL2(o) ; the reduction of p along A 
is then the composite pa '■ G — > GL 2 (o) — > GL 2 (F) ; we call it the reduction 
of /9(G). For every M e GL 2 (K) such that Mp(G)M~ 1 C GL 2 (o), we get 
another G-stable o-lattice in V together with an o-basis, giving another 
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reduction G -> Mp(G)M~ 1 -> GL 2 (o) -> GL 2 (F) of p. We will show 
that at least one of these reductions is of the desired type ( ^ 

V ^2 

and that, if all reductions of this type are semisimple, then p cannot be 
simple, which it is by hypothesis. 

Let 7r be an o-basis of p, also called a uniformiser of K, and put 

P = I r, I ; we have 

pfa irb\ p - X _ ( a b 
c d I I tic d 



the reduction of p is of the desired type n , for if the reduction 



-l 



This implies that there is at least one G-stable o-lattice in V along which 

<Pi * 

if 2 

of p(G) is of the other type ® ^, then the reduction of Pp(G)P 

is of the desired type, as the above formula shows. 

Suppose therefore that the reduction of p(G) is of the desired type 

n : it remains to show that, among the reductions of p of this 

<P2 J 

type, there is at least one which is not semisimple. Suppose, if possible, 
that every reduction of the type ( ^} J is semisimple. We shall 



ip 2 

construct a sequence of matrices (Mj)j £ N in GL2(o), having a limit 
M e GL 2 (o), such that Mp(G)M _1 C ( ° ° x ) , showing that p is 



not simple — a contradiction. 

Suppose that, for some % G N, a matrix M; = ( g ^ ) in GL 2 (o) has 



been found such that 

M l p(G)M~ 1 c 



-i _ / o x P l 



for i = 0, take M = | I J ). The above inclnrion can be rewritten 



P i M i p(G)M i 1 P 1 C (^pi+i x J; whose reduction is of the desired 
type \^} * J , because the reduction of p(G) is of this type. As all 



ip 2 

reductions of this type are semisimple by hypothesis, there exists a matrix 



Ui = ( q ) in GL 2 (o) which diagonalises the reduction in the sense 



that 



U l P l M l p(G)M- 1 p- l U- 1 c 1 0>< P 



p 0' 

Denoting the entries of a matrix () G GL 2 (o) by (on(), ai2(); fl2i()> °22())) 
one has ci2i(UiMU~ 1 ) = a2i(M). This means that we actually have 



for the a2i of the matrix being conjugated by Ui was in p l+1 . Conjugating 





by P~ l and taking M i+1 = P~ l U l P l M i = ( l U + ^ ) , the above 



inclusion implies 

M i+1 p(G)M- + 1 1 c 



x pl +l 
P X 



completing the construction of the sequence (Mj)i £ N by induction. It 
is clear that this sequence converges in GL 2 (o), and that the limit M 

p o x J ' w ' 1 ^ c ' 1 con t r adicts the simplicity of p 

and thereby proves that p has at least one reduction which has the desired 
type but which is not semisimple. 

For a generalisation of (2.1), see [1]. 

3. A weight-2 level-p cuspidal eigenform 

Let p be an odd prime, and let u : F x — > Z x be the unique character 
(the Teichmiiller lift) such that u(d) = d (mod.p) for every d G F x . The 
image of is the subgroup p -ip or roots of 1 of order dividing p — 1. If a 
number field K contains these roots of 1, and if we fix a prime p\p of K, 
then we may think of u> as taking values in K x . 



Let k G [2, p — 3] be an even integer such that pjBfe, and put e 



U! 



fc-2 



See Anupam Saikia's contribution [12] to this volume for the proof of the 
following crucial result. 

Theorem 3.7. - - Suppose that p|B/j. There exist a normalised cuspidal 
eigenform f G &z(p, e), f = X!n>o a ™^ n > °f we wht 2, level p, and 
character e, and a prime p\p of the number field K/ (0.4) generated by 
the q- coefficients of f such that for every prime I ^ p, the number a\ is 
p-integral and 

ai = 1 + / fc_1 = 1 + e(l)l (mod. p). 



Note that Kf is a number field (0.4) and that e may be thought of as 
taking values in Kp for Kf contains Q(e), the number field generated by 
the values of e (0.4). 

Now let p / )P be the representation attached to / at p ; we show that it 
has a reduction r having the properties (i)-(iv) of (1.3). 

4. The Galois representation 

Denoting the p-adic cyclotomic character by x '• Gq — > Z* (so that 
X : A — > Fp is the reduction of and thinking of it as taking values 
in K^ p , the equality det(p/ jP (Frob/)) = le(l) (0.6) can be rewritten as 
de W,P = 

Proposition 4.1. — The representation pf jP is simple. 

Suppose that it is not; its semisimplification is then p\ © p2, for some 
characters pi : Gq — > . It follows (0.2) that each pi can be written as 
X" 1 (for some rii G Z) on an open subgroup of the inertia subgroup at p, 
and therefore pi = SiX ni for some characters of finite order e% : Gq — > 
unramified away from p. 

Thinking of the e, as characters of (Z/m^Z) x for some rrii, we have, for 
every prime / 7^ p, the relations 

ei(l)l ni + e 2 (l)l n2 = a h £i(/) £2 (/)r i+n2 = le(l). 

From the second equation we get n\ + n<i = 1, and hence one of the is 
> 1 and the other < 0. The first equation then gives |a/| > I — 1 which, 
for / > 7, contradicts the "Riemann hypothesis" |a/| < 2V 7 /, as proved by 
Eichler-Shimura. 

Denote the ring of integer of K/ )P by 0/ >p . 

Proposition 4.2. — There exists a G^-stable 0/ ^-lattice A c V/ )P such 
that 

fl * \ , (1 

P/,P,A~I x fc-i ) ' ftMH x *-i 

We know that p/ )P is irreducible (4.1). The proposition would follow 
from (2.1) once we show that p/ )P ~ 1 © where p/ ;P is the 

semisimplification of P/, p ,a (0.3). 

Indeed, for every prime / 7^ p, we know (0.6) that p/ )P , and hence 
the reduction p/ jP , is unramified at /. Moreover (0.6), the trace and the 
determinant of Frobj G lmpf P are ai and le(l) respectively. By (3.7) and 
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the definition of e, these numbers are congruent respectively to 1 + I 
and Z fc_1 modulo p. By the Chebotarev density theorem, the trace and 
the determinant of p/ jP are 1 + x k ~ 1 an d X fc_1 respectively, which are the 
same as the trace and the determinant of the (semisimple) representation 
1 © X k ~ 1 - But two degree-2 semisimple representations having the same 
trace and the same determinant are the same (0.3), hence p/ )P ~ 1 ©x fc_1 , 
which was to be proved. 

Now fix such a lattice A and let r = p/ ; A be the reduction of p/ iP along 
A. We have seen that the representation r satisfies the conditions (i)-(iii) 
of (1.3) ; it remains to check that it satisfies (iv) — the restriction t|d p of 
r to a decomposition group D p at p is semisimple. 

Denote by F the residue field of Kj p and by M the (2-dimensional) 
F-space which carries the representation r. Let L be the completion of 
Q(C) + at the unique place above p, and D = Gal(L|L) the decomposition 
group at the said place. It is sufficient to show that r|o (or the D-module 
M) is semisimple, for the index (D p : D) is prime to p, where we have 
identified D p with Gal(L|Q p ). 

Proposition 4.3. The 'D-module M comes from a finite flat p- 
elementary commutative group scheme over the ring of integers Ol of L. 

There is an abelian Q-variety A which is Q-isogenous to Af and such 
that 0/ C End(A), because K f C End Q (A/) © Q. The D-module M is 
then the "kernel" P A of p, and hence contained in the D-module P A, the 
kernel of p. As A has good reduction over L (0.7), the D-module P A comes 
from a finite flat p-elementary commutative group scheme over Ol, namely 
the kernel P A of p, where A — the neronian model of A — is the abelian 
OL-scheme whose generic fibre is A. It follows that the D-module M = P A 
comes from the the schematic closure M of M in P A (0.8). 

Theorem 4.4. — The D-module M is semisimple. 

This is the same as saying that the order of r(D) is prime to p, and will 
follow from the existence of two distinct F-lines (X and M°) in M which 
are D-stable. 



X C M be an F-line on which D acts trivially, so that D acts via \ k 1 on 
the F-line Y = M/X; in particular, Y is ramified. 

Let X be the schematic closure of X in M, so that the D-module coming 
from X is X. As the absolute ramification index (p— l)/2ofLis<p— 1, the 
group scheme X is constant (0.8). It follows that M. cannot be connected, 



We know that r, and hence 
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for it has the etale subgroup scheme X (of order > 1). 

Now, the group scheme M. is an F-space scheme. Let M° C M be the 
sub-F[D]-module coming from the largest connected subgroup scheme of 
M, so that the F[D]-module M/M° comes from the largest etale quotient 
of M. and hence M/M° is unramified. 

We have M° 7^ M, because M. is not connected, as we have seen. We 
have M° 7^ because M/M° is unramified whereas M is not (for it has 
the quotient Y which is ramified). For the same reason, M° 7^ X, because 
M/M° is unramified whereas Y = M/X is ramified. Thus X and M° are two 
distinct D-stable F-lines in M, and hence the D-module M is semisimple, 
which was to be shown. 

Summary of the proof of the main theorem (1.1). — The first step (3.7) 
is to construct, if p\Bk, a normalised cuspidal eigenform / G &2(Ti(p)) 
such that for every prime / 7^ p, the (/-coefficient Q>i(f) is = 1 + Z fc_1 
modulo a certain prime p\p of K/. A certain reduction r (2.1) of the 
associated p-adic representation pj p gives an every where- unramified p- 
elementary abelian extension E|Q(£) which is Galois over Q and such 
that A = Gal(Q(C)|Q) operates on H = Gal(E|Q(£)) via the character 

x i-k . A _ F x_ Hence c( x 1 " fc ) 7^ 0. 

5. A weight-/c level-1 cuspidal eigenform 

At the time of writing [16], Ribet was aware that instead of the form 
/ G ©2(^7 s) of (3.7), one can try using a suitable form g G 6fc(l), as 
suggested by [13]. The construction of g is more conceptual and less 
computational than that of /. He could show that for some prime q\p 
of the number field K s , the associated representation p gA has a reduction 
r satisfying properties (i)-(iii) of (1.3). However, the techniques of the day 
were insufficient to prove that the said reduction had the property (iv). 

As pointed out by C. Khare [11], it has now become possible to show 
that r satisfies (1.3) (iv), thanks to the work of Faltings-Jordan [9] and 
Fontaine-Laffaille [10]. We show the existence of g and prove that there is 
indeed an r satisfyings (1.3) (iv) as well. 

Proposition 5.1. — Suppose thatp\Bk for some even k G [2,p — 3]. There 
exist a normalised weight-k level-1 cuspidal eigenform g = J2 n>0 a n {g)q n 
in <5fc(l) and a prime <\\p of the number field K g generated by the q- 
coefficients of g such that for every prime I 7^ p, the number ai(g) is 
q-integral and 

ai(g) = l + / fc_1 (mod.q). 
Recall that the Eisenstein series Gj = (—Bj/2j) + J2 n >o CF j-^( n ) ( l n ^ 
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where o~i(n) = ^2^ n d l , is in for every even integer j > 2; our k 

is > 2, for the denominator of B2 is 1. Notice that ai(Gk) = 1 + l k ~ 1 
for every prime /. Also recall that there is a unique normalised cuspidal 
eigenform A G ©12(1), with g-expansion 

? n(i-? n ) 24 =E^ n 

n>0 n>0 

The graded C-algebra of level-1 modular forms 971(1) is the polynomial 
ring C[G4, Gq], and the graded ideal 6(1) C 371(1) of level-1 cuspidal forms 
is principal, generated by A [8, p. 88]. 

Following a suggestion of K. Joshi, we therefore look for a g of the type 
g = <7iA + • • • + g n A n for a suitable n > 0, where gi = ajGJGg* (a; G Z, 
Cj, <ii G N, 4ci + 6<ii + 12i = k). Notice that every even integer > 2 can be 
written as 4c + 6d for some c, d G N. 

The existence of a (7 G ©fc(l)z such that g = G& (mod.p) now follows 
from the fact that the constant terms — B4/8 and — B 6 /12 of G 4 , G 6 have 
numerators 1, —1 respectively, and that if /i,/2 G 97lfc(l) have the same 
first few (roughly fc/12) ^-coefficients, then /1 = /2, because the space 
SDTfc (1) is finite-dimensional. For example, g = A would do if p = 691 and 
k = 12. 

But we need a normalised eigenform, not just a cuspidal form. This 
is furnished by the following lemma of Deligne-Serre, which implies the 
existence of a number field L', a prime q\p of L', and a normalised eigen- 
form g G 6fc(l)i/ with q-integral ^-coefficients, such that the congruence 
ai(g) = 1 + l k ~ 1 (mod. q) holds for every prime / 7^ p. 

Lemma 5.2 [7, p. 522]. — Let A be a discrete valuation ring, m its maximal 
ideal, and L its field of fractions. Let M be a free A-module of finite rank, 
and f) a set of commuting A-endomorphisms of M. Let f G M/mM be 
an eigenvector for every T G f), of eigenvalue ot G A/m. There exists a 
discrete valuation ring A' containing A, whose field of fractions is a finite 
extension of L and whose maximal ideal m' restricts to m, and a common 
eigenvector f G M ®a A' for f) suc/i t/iat t/ie eigenvalue a' T G A' 0/ /' is 
= ax (mod. m') for every T G f). 

See Anupam Saikia's contribution to this volume [12, 4.2] for a proof. 

To complete the proof of (5.1), apply this lemma with A = Z( p ), 
M = 6fc(l)z (p) ) f) the set of Hecke operators T^ for primes /, and / = g, 
the reduction of g modulo p, which is an eigenform in M/pM — Sfc(l)p , 
the eigenvalue for T z being 1 + P -1 G F p for every / 7^ p, because g = Gfc. 
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Recall that to g and q as in (5.1) Deligne [5] attaches a degree-2 
representation p gA of Gq over the completion K 5jq of K g at q ; it is 
unramified at every prime / 7^ p; the trace of p g) q(Frobz) is ai(g), the 
determinant l k ~ x . 

Proposition 5.3. — The representation p gA is simple. 

The proof is the same as for the representation pf tP in (4.1), using the 
Ramanujan-Peterson estimate u \ai(g)\ < 2y / l k ~ 1 for every prime / 7^ p", 
as proved by Deligne [5], instead of the earlier u \ai(f)\ < 2\/V\ 

Proposition 5.4. — The representation p gA has a reduction r such that 

••-(J ^(J 



This follows from (2.1) much in the same way as (4.2) does, because 
p g>q ~ 1 © x fc_1 , since the trace of every reduction is = 1 + x k ~ l (mod. q) 
and the determinant is = x k ~ 1 - 

Proposition 5.5. — The restriction r\j) p of r to the decomposition group 
D p at p is semisimple ; in fact, the order of r(D p ) is prime to p. 

6. The denominators of Bernoulli numbers 

Let's conclude with Witt's unpublished proof, as presented in [2], about 
the prime divisors of the denominators of B^. It implies in particular that 
the numerator of B p _i is never divisible by p. 

Theorem 6.1 (von Staudt-Clausen, 1840). — Let k > be an even integer, 
and let I run through the primes. Then the number 

(1) W fc =B fc + J 

l-l I k 

is always an integer. For example, Bi 2 + - + - + - + - + — = 1. 

A o O 1 J_o 

The British analyst Hardy says in his Twelve lectures (p. 11) that this theorem 
was rediscovered by Ramanujan "at a time of his life when he had hardly formed any 
definite concept of proof". 

Proof (Witt) : The idea is to show that W& is a p-adic integer for every 
prime p. More precisely, we show that B^ + p~ x (resp. B^) is a p-adic 
integer if p — 1 1 k (resp. if not). 
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For an integer n > 0, let Sfc(n) = k + l k + 2 k -\ \-(n — l) k . Comparing 

the coefficients on the two sides of 

l + e T + e 2T + ... +e (n-l)T = e J I 



T e T - 1 



we get Sfc(n) = ( j — n k+1 m . To recover from Sfc(n), 

\m/ k + 1 — m 

m€[0,fc] v 7 

it is tempting to take the limit lim Sfc(n)/n, which doesn't make sense in 

the archimedean world. If, however, we make n run through the powers 
p s of a fixed prime p, then, p-adically, p s — > as s — > +oo, and 

(2) lim S fc (p s )/p s = B fc . 

Let us compare Sfc(p s+1 )/p s+1 with Sfc(j> s )/p s . Every j G [0,p s+1 [ can be 
uniquely written as j = up s + v, where u G [0,p[ and v G [0,p s [. Now, 

s k ( P s+1 )= E = E E (^ s +^) fc 

j'e[o,p s + 1 [ ue[o, P [ve[o,p s [ 

= P E^^ ) + kpS E w E t,fc l ) ( mod -P 2s ) 
\ i> / V u u / 

by the binomial theorem. As J2 v v k = Sk(p s ) and 2 J2 u u = p(p — 1) = 
(mod.p), we get 

S k (p s+1 ) = pS k (p s ) (mod.p s+1 ), 

where, for p = 2, the fact that is even has been used. Dividing throughout 
by p s+1 , this can be expressed by saying that 



p s+l p s E Z (P) 



is a p-adic integer, and therefore 



p r p s 



G Z 



(p) 



for any two integers r > 0, s > 0, since Z( p ) is a subring of Q. Fixing 
s = 1 and letting r — > +oo, we see that — Sk(p)/p £ ^(p)> m y i ew °f 
(2). We need 
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t r. ^ n / \ -k f — 1 (mod. p) if p — 1 1 A; 

Lemma 6.2. — S fc (p) = > J = < n v , , { X ■ 

' I (mod. p otherwise. 

je[i, P [ k 

This is clear if p— 1 1 fc. Suppose not, and let (7 be a generator of (Z/pZ) x . 
We have (7 fc — 1 ^ 0, whereas 



(/-i) I E / E ^N^ (p - 1)fc -i-o 

^"e[i,p[ / \te[o, P -i[ 

It follows that Bfc + p~ x e Z( p ) if p — 1 1 k and Bfc e Z( p ) otherwise. In 
either case, the number Wfc (1), which can be written as 



w J (Bfc+p-^+E^/" 1 ifp-l|* 
' (B fc ) + J2i otherwise, 



(where / runs through the primes for which I — 1 | k) turns out to be a 
p-adic integer for every prime p. Hence Wfc G Z, as claimed. 

John Coates remarked at the workshop that the analogue of (6.1) for 
a totally real number field F (other than Q) is an open problem; even a 
weak analogue would imply Leopoldt's conjecture for F. 
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